Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
ubuntucveUbuntu.comUB:CVE-2015-7941
HistoryOct 23, 2015 - 12:00 a.m.

CVE-2015-7941

2015-10-2300:00:00
ubuntu.com
ubuntu.com
10

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.2%

JSON

libxml2 2.9.2 does not properly stop parsing invalid input, which allows
context-dependent attackers to cause a denial of service (out-of-bounds
read and libxml2 crash) via crafted XML data to the (1) xmlParseEntityDecl
or (2) xmlParseConditionalSections function in parser.c, as demonstrated by
non-terminated entities.

Bugs

OSVersionArchitecturePackageVersionFilename
ubuntu12.04noarchlibxml2< 2.7.8.dfsg-5.1ubuntu4.12UNKNOWN
ubuntu14.04noarchlibxml2< 2.9.1+dfsg1-3ubuntu4.5UNKNOWN
ubuntu15.04noarchlibxml2< 2.9.2+dfsg1-3ubuntu0.1UNKNOWN

Related

prion 2
cve 2
debiancve 2
ubuntucve 1
f5 2
openvas 17
nessus 32
fedora 4
osv 36
aix 1
ubuntu 1
rubygems 1
ibm 11
redhat 2
oraclelinux 2
centos 2
archlinux 1
veracode 3
freebsd 1
debian 2
amazon 2
gentoo 1
suse 1
tenable 1
prion
prion
Out-of-bounds
2015-11-18 16:59:00
Out-of-bounds
2015-11-18 16:59:00
cve
cve
CVE-2015-7941
2015-11-18 16:59:00
CVE-2015-7942
2015-11-18 16:59:00
debiancve
debiancve
CVE-2015-7941
2015-11-18 16:59:00
CVE-2015-7942
2015-11-18 16:59:00
ubuntucve
ubuntucve
CVE-2015-7942
2015-10-23 00:00:00
f5
f5
SOL61570943 - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-15 00:00:00
K61570943 : Multiple libXML2 vulnerabilities
2016-02-15 00:00:00
openvas
openvas
F5 BIG-IP - libXML2 vulnerabilities CVE-2015-7941 and CVE-2015-7942
2016-02-16 00:00:00
Fedora Update for mingw-libxml2 FEDORA-2016-189
2016-02-17 00:00:00
Debian: Security Advisory (DLA-266-1)
2023-03-08 00:00:00
nessus
nessus
AIX 7.2 TL 0 : libxml2 (IV80616)
2016-02-23 00:00:00
AIX 7.1 TL 4 : bos.rte.control (U868931)
2016-05-19 00:00:00
AIX 5.3 TL 12 : libxml2 (IV80617)
2016-02-23 00:00:00
fedora
fedora
[SECURITY] Fedora 22 Update: mingw-libxml2-2.9.3-1.fc22
2016-02-17 04:26:04
[SECURITY] Fedora 23 Update: mingw-libxml2-2.9.3-1.fc23
2016-02-17 04:02:04
[SECURITY] Fedora 22 Update: libxml2-2.9.3-1.fc22
2015-11-30 23:26:43
osv
osv
libxml2 - security update
2015-07-03 00:00:00
CVE-2016-9597
2018-07-30 14:29:02
CVE-2016-3709
2022-07-28 17:15:07
aix
aix
Vulnerabilities in LibXML2 affect AIX,Vulnerabilities in LibXML2 affect VIOS
2016-02-22 08:06:13
ubuntu
ubuntu
libxml2 vulnerabilities
2015-11-16 00:00:00
rubygems
rubygems
Nokogiri gem contains several vulnerabilities in libxml2 and libxslt
2015-04-13 21:00:00
ibm
ibm
Security Bulletin: Vulnerabilities in XML processing affect IBM DataPower Gateways
2021-06-08 22:18:27
Security Bulletin: Multiple vulnerabilities in Libxml2 affect IBM Security Network Protection
2018-06-16 21:39:19
Security Bulletin: Multiple vulnerabilities in libxml2 affect IBM Cognos Metrics Manager (CVE-2015-1819, CVE-2015-5312, CVE-2015-7497, CVE-2015-7498, CVE-2015-7499, CVE-2015-7500, CVE-2015-7941, CVE-2015-7942, CVE-2015-8035, CVE-2015-8241, CVE-2015-8317)
2018-06-15 23:15:11
redhat
redhat
(RHSA-2015:2549) Moderate: libxml2 security update
2015-12-07 00:00:00
(RHSA-2015:2550) Moderate: libxml2 security update
2015-12-07 10:04:33
oraclelinux
oraclelinux
libxml2 security update
2015-12-07 00:00:00
libxml2 security update
2015-12-07 00:00:00
centos
centos
libxml2 security update
2015-12-07 13:26:33
libxml2 security update
2015-12-07 20:38:05
archlinux
archlinux
libxml2: multiple issues
2015-12-09 00:00:00
veracode
veracode
Denial Of Service (DoS)
2019-05-02 05:51:46
Information Disclosure
2019-05-02 05:51:46
Denial Of Service (DoS)
2019-05-02 05:51:46
freebsd
freebsd
libxml2 -- multiple vulnerabilities
2015-11-20 00:00:00
debian
debian
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
[SECURITY] [DSA 3430-1] libxml2 security update
2015-12-23 13:19:18
amazon
amazon
Medium: libxml2
2015-12-14 10:00:00
Medium: libxml2
2019-05-29 19:14:00
gentoo
gentoo
libxml2: Multiple vulnerabilities
2017-01-16 00:00:00
suse
suse
Security update for sles12-docker-image (important)
2016-03-16 15:28:52
tenable
tenable
[R1] Nessus Network Monitor 6.2.2 Fixes Multiple Vulnerabilities
2023-06-29 10:45:47

4.3 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

MEDIUM

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:M/Au:N/C:N/I:N/A:P

0.002 Low

EPSS

Percentile

58.2%

JSON
Related for UB:CVE-2015-7941
prion2cve2debiancve2ubuntucve1f52openvas17nessus32fedora4osv36aix1ubuntu1rubygems1ibm11redhat2oraclelinux2centos2archlinux1veracode3freebsd1debian2amazon2gentoo1suse1tenable1